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Market development in 2013 


l. Payment service issuers gradually launched NFC 
mobile payment services 


O 4 banks launched NFC mobile payment services, 
compared with 1 bank last year 


O 1 more bank has recently announced the launching 
of NFC mobile payment service in the near future 


2. Mobile payment products extended from credit 
card to stored value card 


O A stored value mobile wallet was launched in 
October 2013 


3. Development of shared infrastructure 





O Acard association will complete the development of 
shared infrastructure early next year to support 


mobile payment services to be launched by its 
member banks 


Forecast for next year’s development 


1. New market participants joining the market 


O Other than existing players which already include 5 banks, 1 
stored value card association and 2 card associations, other 
banks and card associations are planning to launch NFC mobile 
payment services 


2. More mobile network operators (MNOs) supporting NFC 


O In addition to 2 MNOs which have launched of NFC mobile 
payment services, 2 more MNOs will launch the services next 
year 





3. Multiple payment cards on a single SIM card 


O Product suppliers are working on a technology breakthrough to 
integrate both credit cards and stored value cards on a single 
SIM card 
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Issuance of Best Practice 


m An NFC task force established under HKAB has worked with the HKMA 
to discuss and agree on a set of standards and guidelines 


= After afew months’ effort, the Best Practice is issued by HKAB as an 
industry guideline for its member banks to follow 


= The Best Practice covers the following areas: 
1. Security requirements : to ensure security of services 


2. Technical standards : to facilitate interoperability among different NFC 
infrastructures, mobile devices and terminals by adopting widely applied 
industry and international standards 


3. Operational processes : to enhance user experience by introducing 
standardised operational process 


E 
™ Best Practice supports the long term development of 
NFC mobile payment 










Achieve the long term objectives of interoperability 
and a high level of security 





High level of security enhances user confidence 


Facilitate interoperability among different 
infrastructures with common standards and 
guidelines 


Pave the way for the long term 
development of NFC mobile payment 


Best Practice - security requirements 


=» The HKMAwill take into account the security requirements in the Best 
Practice in its supervision of NFC mobile payment services to maintain a 
consistent and high level of security 


= The security requirements include measures: 


O to secure the generation, transmission and storage of payment card 
data in mobile payment infrastructures 


O to ensure security during the execution of payment transactions 


o to protect payment card data and transaction data 
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Best Practice — technical standards 


= Adopt technical standards set by industry and international organisations 


= For example: 


O ISO standards: specifying the communication protocols between mobile 
phones and contactless readers 


O ETSI standards: specifying the communication protocols between 
mobile phones and secure elements 


O GlobalPlatform standards: specifying the protocols on TSM-to-TSM 
communication and secure element architectures 


O0 EMVCo standards: specifying payment card security and 
personalisation 


ISO : International Organization for Standardization 
ETSI : European Telecommunications Standards Institute 
EMV : Europay, MasterCard and Visa 
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Best Practice at a glance 


=» Payment card data should be generated and stored in a secure environment 
a They should be transmitted in encrypted channels 
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Best Practice at a glance 


As a secure element can store multiple payment cards issued by different 
banks, only authorized mobile wallet applications can access the 
assigned payment cards stored in the secure element. 
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Best Practice at a glance 


m Users can check transaction histories with mobile payment applications 


Bank Wallet 
Bank 
card 1 Transaction details 
can be reviewed in 
Recent transactions: real time. 


25/10 Eight Twelve 
25/10 Wattbird 
26/10 Easytrans 
27110 CoffeeGood 





Info Settings 
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Best Practice at a glance 





Mobile credit cards follow the existing no-signature limit on contactless 
credit cards. Currently, the highest limit is HK$1,000 per transaction. 


If the transaction amount exceeds the limit, additional security measures, 
such as signature or password, are required. 


Per transaction value 


Within the transaction Exceed the transaction 
limit limit 


Payment 
Operation 


Require additional security 


Tap your card 
measures 
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Best Practice is conducive to a favourable market 
environment 


=m The Best Practice enables banks, mobile network operators and card 
associations to launch new NFC mobile payment services based on 
the same set of standards and guidelines, helping to achieve the four 
development objectives and interoperability among different services 
in the long-term. 


m The HKMA will take into account the security requirements of the Best 
Practice in its Supervisory process. Together with Hong Kong’s 
favourable market conditions, this will enhance public confidence and 
build a solid foundation for the wide acceptance of NFC mobile 
payment services in Hong Kong. 
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Speech by HKAB and panel discussion 
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